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CLAIMS: 

1. A method for providing access to a service for a user in 
a communication system^ comprising the steps of: 
5 using a specific record, associated with said user, at a 

node in the communication system, containing information 
which, determines that a user is to be verified prior to 
providing access to said service. 

10 2. The method as claimed in claim 1 further comprising the 
steps of: 

transferring said information from the AAA-H to the 
serving node in the signalling path for the service setup 
cind/or service event and/or registration. 

15 

3 • The method as claimed in claim 1 further comprising the 
steps of: 

deciding based • on said information that the 
authentication and/ or authorization needs be verified. 

20 

4. The method as claimed in claim 1 and 3 further comprising 
the steps of : 

performing the authentication and/ or author izat ion . 

25 5. The method as claimed in claim 4 further comprising the 
steps of: 

performing the authentication and/or authorization by 
using the AAA-H. 
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6. The method as claimed in claim 4 further comprising the 
steps of: 

perfoanning the authentication and/or authorization in the 
node if the required parameters are available. 

5 

7. A method for providing a user of user equipment with 
access to a service from 

a service provider node in a wireless communication system, 
comprising the steps of: 
10 using a user specific record indicating a condition which, if 
satisfied; determines that a user characteristic is to be 
verified prior to providing access to said service; and 
providing access to said service responsive to said user 
specific record. 

15 

8. The method as claimed in claim 7 further comprising the 
steps of: 

determining if said condition is satisfied; and 
providing access to said service without verifying said 
20 user characteristic if said condition is not satisfied. 

9 . The method as claimed in claim 7 further comprising the 
steps of: 

determining if said condition is satisfied; 
25 verifying said user characteristic if said condition is 

satisfied; and 

subsequent to said step of verifying the user 
characteristic providing access to said service if said user 
characteristic indicates the user is permitted access to said 
30 service. 
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10. The method as claimed in any one of claims 7 to 9 further 
comprising the steps of: 

determining if said condition is satisfied when a call 
session' between said user and said service provider node is 
initiated. 

11. The method as claimed in any one of claims 7 to 9 further 
comprising the steps of: 

determining from the user specific record associated with 
said user if said condition exists during a call session 
between said user equipment and said service provider node. 

12. The method as claimed in any one of claims 7 to 11 
wherein said wireless communication system comprises a serving 
network in which said user equipment is located, and a home 
network, said method further comprising the step of: 

indicating, via said user specific record, when access to 
said service is permitted without determining, from data 
stored at a node in said home network, if access is permitted. 

13. The method as claimed in any one of claims 7 to 11 
wherein said wireless commimi cation system comprises a serving 
network in which said user equipment is located, and a home 
network, said method further comprising the step of: 

storing said user specific record at a node of said 
serving network. 

14. The method as claimed in any one of claims 7 to 13 
further comprising the steps of: 
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generating a register message at said user equipment and 
transmitting said register message to a local server node of 
said communication system/ 

determining if a condition indicated by said user 
specific record stored at said local server node is satisfied; 

generating an access message at said local server node 
indicating that access to said service is permitted; and 

transmitting said access message to said service provider 

node . 

15. The method as claimed in claim 14 further comprising: 
prior to said step of storing said user specific record, 

generating a request message at said local server node and 
transmitting said request message to the home AAA server of 
the user; and 

transferring data comprising said user specific record 
from said home AAA server to said local server node responsive 
to said request message. 

16. The method as claimed in any one of claims 7 to 13 
further comprising: 

generating an invite message at said user equipment and 
transmitting said invite message to a local server node of 
said communication system; 

determining if a condition indicated by said user 
specific record stored at said local server node is satisfied; 

generating an access message at said local server node 
indicating that access to said service is permitted; and 

transmitting said access message to said service provider 

node . 
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17. The method as claimed in any one of claims 7 to 16 
wherein said user characteristic comprises whether said user 
is authorised to access said service. 

18. The method as claimed in any one of claims 7 to 16 
wherein said user characteristic comprises whether said user 
is authenticated to access said service. 

19. The method as claimed in any one of claims 7 to 16 
wherein said condition determines the frequency at which said 
user is to be authorised and/or authenticated during a call 
session between said user equipment and said service provider 
node. 

20. The method as * claimed in any one of claims 1 to 19 
wherein said step of using a specific record comprises storing 
a user specific record 

21., A server node of a communication system for providing a 
user of user equipment with access to a service from a service 
provider node, said server node comprising: 

means for receiving a message from said user equipment; 

means for using a user specific record, associated with 
said user, indicating a condition which, if satisfied, 
determines that a user characteristic is to be verified prior 
to providing said user with access to said a service; and 

means for generating, in response to said user specific 
record, an access message for providing said user with access 
to said seirvice. 
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22. The server node as claimed in claim 21 further 
comprising: 

means for transmitting said access message to a service 
5 provider node. 

23. A server node as claimed in claim 21 or 22 further 
comprising: 

means for receiving data comprising said user specific 
10 record transmitted from a home AAA server node. 

24. A server node as claimed in any one of claims 21 to 23 
comprising a serving or proxy- call session control function 
node . 

15 

25. A server node as claimed in any one of claims 21 to 24 
wherein said user specific record comprises a first data field 
identifying said user and a second data field determining when 

"authentication and/or author is ait ion of said' user * is required 
20 in order to access said service. 

26. The server node as claimed in claim 21 wherein said means 
for using a user specific record comprises means for storing 

25 27. Mobile user equipment, for providing a user with access 
to a service from a service provider node, comprising: 

means for using a user specific record associated with 
said user, indicating a condition which, if satisfied, 
determines that a user characteristic is to be verified prior 

30 to providing said user with access to said a service; and 
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means for generating, in response to said user specific 
record, an access message for providing said user with access 
to said service. 

28. Mobile user equipment as claimed in claim 27 wherein said 
means for using a user specific record comprises means for 
storing a user specific record. 



